Symantec Privileged Access Management

  • Private Community
 View Only

  • 1.  Reset super and config user password in PAM4.0

    Broadcom Employee
    Posted Jul 02, 2021 08:01 AM
    Good Morning!

    I have PAM4.0 installed on VMWare. I am not able to login to PAM using super and config user even though I do have password for them. I tried to reset the password via VMWare console for config user but unable to login to PAM using config with default password. Can someone help me to reset passwords of super and config user. Thanks in advance.
    Regards,
    Pravin Bhole


  • 2.  RE: Reset super and config user password in PAM4.0
    Best Answer

    Broadcom Employee
    Posted Jul 02, 2021 09:57 AM
    Hello Pravin, There is no reset for the super user password. Only Support could do that using SSH access, but in order for that to work the SSH debug patch would have to be applied, and Remote Debugging would have to be on. The config user password reset should work. Make sure you use the correct URL for the config user login, https://<pam server>/config/, or https://<pam server>/config/?legacy=1. The default password is config, as documented. The config user cannot change the super user password. But with the config user logon, the debug patch could be applied, and remote debugging could be turned on, so that Support can assist you with resetting the super user password.
    Original Message


  • 3.  RE: Reset super and config user password in PAM4.0

    Broadcom Employee
    Posted Jul 02, 2021 10:20 AM

    Hi Ralf,

    I tried one more time to reset the config password through VM console. I am able to login to PAM as config user. I have applied the PAM_SUPPORT_SSH_DEBUG fix to PAM4.0 server. What should be my next step?
    Regards,

    Pravin Bhole


    Original Message


  • 4.  RE: Reset super and config user password in PAM4.0

    Broadcom Employee
    Posted Jul 02, 2021 10:30 AM
    Now you open a case with PAM Support to get the super user password reset.
    Original Message


  • 5.  RE: Reset super and config user password in PAM4.0

    Broadcom Employee
    Posted Jul 02, 2021 10:40 AM

    Hi Ralf,

    I tried couple combinations for super user password and one of that is clicked out. I am able to log with super user. Thank you for quick responses. Summarizing solution for resetting password for config and super user-
    1. Reset the config user password using PAM server console(VM console)
    2. Login to PAM config UI (https://PAMServername OR IP/config/) with default password for config user.
    3. Apply the PAM_SUPPORT_SSH_DEBUG to PAM server.
    4. Open support case to reset the super user password.
    Thank you for timely help to get into PAM UI.

    Regards,

    Pravin Bhole


    Original Message